3648663 - Incorrect Behaviour of passcode in IOS

1. Passcode reset issue occurs for users of the SAP Cloud for Customer mobile IOS app.
2. Users are prompted to reset their passcode after not using the app for several days.

SAP Hybris Cloud for Customer Extended App on IOS

1. Log in to the SAP Cloud for Customer mobile app on an IOS device.
2. Leave the app unused for several days.
3. Attempt to log in again; the app prompts for a passcode reset.

The issue is related to token expiration settings configured within the app's security policies.

We have two types of token expiration settings in place:

Refresh Token Expiration Period – This is currently set to 7 days. It means the refresh token remains valid for 7 days. By default, it's set to 7 days, but we can change it to any value between 1 and 365 days.

OAuth Token Expiration Period – This defines how long the OAuth token is valid. By default, it expires after 1 hour, but it can be set between 1 to 24 hours.If the OAuth token expires, the app will use the refresh token to get a new one. However, if the refresh token also expires or is revoked, then the user has to log in again using their username/password or single sign-on to get a new set of tokens.Using a short-term OAuth token with a long-term refresh token helps balance security and user convenience.

1. Navigate to the administrator settings in the SAP Cloud for Customer system.
2. Locate the "General Settings" section and select "Mobile Settings".
3. Adjust the following token expiration settings:

• **Refresh Token Expiration Period**: Change the default value of 7 days to a longer duration, if required (valid range: 1 to 365 days).
• **OAuth Token Expiration Period**: Modify the default value of 1 hour to a longer duration, if required (valid range: 1 to 24 hours)
•  Save the changes and ask the affected users to test the app functionality.

• Refer to: SAP Cloud for Customer Security Guide - Special Considerations
• Refer to: Knowledge Article KB1113288 - Option "Prompt for Password After" Set In Security Policies Not Working Correctly In C4C Mobile Apps

passcode reset, sap cloud for customer, mobile app, iOS, token expiration, refresh token, oauth token, security policies, login issue, app settings, sap hybris cloud , KBA , AP-RC-MOB-IPD , SAP Hybris Cloud for Customer Extended App on iOS , Problem